Privacy Policy

This policy applies to labourcodes360.com and every tool, calculator, dashboard and email that forms part of the service. It covers two different kinds of people:

• Account holders — the professionals, employers and consultants who sign up and use the service. For your own data we are the Data Fiduciary.
• People whose data you upload — employees, contract workers, gig workers and anyone named in the records you put into the statutory forms, master data or bulk calculators. For that data you remain the Data Fiduciary and we act as your Data Processor, handling it only on your instructions.

Account and contact details. Your name, email address, and a password stored only as a one-way hash — or, if you sign in with Google, the profile details Google returns. Any organisation name, phone number or state you choose to add. We record whether your email has been verified.

Subscription and payment details. Your plan, its status and billing dates, and the identifiers our payment gateway returns for a subscription or payment. Card, netbanking and UPI credentials are entered on the gateway's own screens and never reach our servers.

What you create in the product. Establishments and registrations you set up, reminders, compliance checklists, saved calculator results and assessments, uploaded documents, questions you ask our experts, support tickets and feedback.

Data you upload about other people. Employee master data and the records needed for statutory forms — which can include identifiers, wage and attendance records, and, where the form requires it, accident and health-check information. We process this on your documented instructions under the data-processing notice you accept before uploading.

Usage measurement. To show how many people have viewed, downloaded or shared a page we store a counter row per visitor per page per day. Visitors are identified only by a one-way fingerprint made from the IP address, browser user-agent and the date — we do not keep the IP address itself in those counters, and we do not build advertising profiles. Downloads and shares made while signed in are recorded against your account.

AI assistant conversations. The questions you put to the assistant and its answers are stored against your account so the conversation continues across sessions.

Server logs. Our web server records the usual request information, including IP address, for security and troubleshooting.

• A session cookie that keeps you signed in. Without it the service cannot work.
• Preferences — your chosen language and light or dark theme.
• Browser storage for things kept on your device only, such as progress ticked on a checklist.

We do not use advertising or cross-site tracking cookies.

• To provide the service — run calculations, generate forms and documents, and keep your saved work.
• To manage your account, subscription, invoices and plan limits.
• To send you service messages, and the compliance alerts, gazette notifications and newsletters you have asked for. You can unsubscribe from those at any time.
• To keep the service secure — preventing abuse, fraud and automated attacks, and diagnosing faults.
• To understand which content is useful, using the aggregate counters described above.
• To meet our own legal and tax obligations.

We do not sell personal data and we do not share it for anyone else's advertising. We use a small number of service providers who process data on our behalf:

• Amazon Web Services — hosting and databases in the Mumbai (ap-south-1) region, and outbound email through Amazon SES.
• Razorpay — payments and subscription billing.
• Cloudflare — bot protection on our forms.
• Upstash — caching and rate limiting.
• OpenAI — the models behind the AI assistant. Your question and the retrieved reference material are sent to OpenAI to generate an answer.

We may also disclose data where the law requires it, or to establish or defend legal claims. If we are ever party to a merger or acquisition, data moves with the business under the same commitments.

Our servers and databases run in Amazon Web Services' Mumbai region, in India. Some of the providers listed above may process limited data outside India in order to provide their service; where they do, we rely on their contractual data-protection commitments.

• Account and subscription records: for as long as your account is open, and afterwards only as long as tax and accounting law requires.
• Data you upload about other people: until you delete it or ask us to, or until our agreement with you ends. On termination we delete or return it within 30 days unless you ask otherwise.
• Usage counters: kept in aggregate; they are not linked to an identifiable visitor.
• Server logs: retained for a limited period for security and diagnostics.

Traffic to the site is encrypted in transit. Passwords are stored as one-way hashes. Access to production systems is restricted to the people who need it, and payment credentials are handled entirely by our payment gateway. No system is perfectly secure, but if a breach affects your personal data we will notify you and the Data Protection Board as the DPDP Act requires.

Under the DPDP Act 2023 you may ask us to:

• tell you what personal data of yours we hold and who we have shared it with;
• correct or complete anything inaccurate;
• erase data we no longer need for the purpose it was collected;
• nominate someone to exercise these rights if you die or become incapacitated.

Write to contact@labourcodes360.com and we will respond within 30 days. If the request concerns data an employer or consultant uploaded about you, we will pass it to them, since that data is theirs to decide on and we only process it on their instructions.

You can close your account at any time from your settings, or by writing to us. Deleting your account removes your saved work; records we must keep for tax or legal reasons are retained for that purpose only.

The service is meant for working professionals and is not directed at children. We do not knowingly allow anyone under 18 to create an account. Where you upload records of a worker under 18 as part of a statutory form, you are responsible for having the consent the law requires.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We will update this page when our practices change and revise the date at the top. If a change materially affects how we handle your data, we will tell you by email or in the product before it takes effect.

Questions? Write to contact@labourcodes360.com, or see our Terms of Service.